A large hospital has an existing contract with a vendor in another country to provide software support and maintenance of the hospital's patient records information system. From the hospital management's perspective, which of the following controls would be most effective to address privacy risks related to this outsourcing arrangement?

• A.Conduct periodic reviews of the privacy policy to ensure that the existing policy meets current legislation requirements in both regions.
• B.Develop an incident monitoring and response plan to track breaches from internal and external sources
• C.Implement mandatory privacy training for management to help with identifying privacy risks when outsourcing services
• D.Include a "right to audit" clause in the contract and impose detailed security obligations on the outsourced vendor

Comment: *

Name: *

Email: *

Verification: *

According to IIA guidance on IT which of the following best describes a but recovery and restore processes have not been defined?

• A.Warm recovery plan
• B.Hot recovery plan
• C.Absence of recovery plan
• D.Cold recovery plan.

Comment: *

Name: *

Email: *

Verification: *

An organization with an annual demand of 25.000 units correctly computes its economic order quantity to be
1,000 units Its safety stock is 300 units and the lead time is two days If there are 250 production days in a year what is the reorder point1?

• A.300 units.
• B.1,000 units.
• C.200 units.
• D.500 units.

Comment: *

Name: *

Email: *

Verification: *

Which of the following strategies is most appropriate for an industry that is in decline?

• A.Invest in marketing.
• B.Control costs.
• C.Shift toward mass production.
• D.Invest in research and development.

Comment: *

Name: *

Email: *

Verification: *

An internal auditor is reviewing the organization's performance appraisal process. Which of the following methods would be most effective to identify stereotyping?

• A.Use a behaviorally anchored rating scale to Break down jobs into their components.
• B.Compare the ratings of selective employees with their previous appraisals.
• C.Analyze the number and percentages of employee appraisals that fall into each rating category
• D.Analyze and compare the ratings for different classes or groupings of employees.

Comment: *

Name: *

Email: *

Verification: *